Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

OpenJDK: insufficient randomization of JNDI DNS port numbers (JNDI, 8286910)

🗓️ 20 Oct 2022 08:08:41Reported by RedHatType 
redhat
 redhat🔗 access.redhat.com👁 3 Views

OpenJDK JNDI DNS port randomization flaw enables unauthenticated remote access on affected Java SE and GraalVM editions.

Related
Packages
Refs
ReporterTitlePublishedViews
Family
ibm		Security Bulletin: IBM SDK, Java Technology Edition, Security Update February 2023
10 Mar 202315:30
–ibm
ibm		Security Bulletin: Multiple vulnerabilities may affect IBM® SDK, Java™ Technology Edition
20 Apr 202313:36
–ibm
ibm		Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Tivoli System Automation for Multiplatforms Oct 2022 CPU (CVE-2022-21628, CVE-2022-21626, CVE-2022-21624, CVE-2022-21619)
7 Feb 202314:27
–ibm
ibm		Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM License Metric Tool v9.
15 Dec 202209:10
–ibm
ibm		Security Bulletin: IBM Sterling Partner Engagement Manager vulnerable to multiple issues due to IBM Java SE
6 Jun 202306:33
–ibm
ibm		Security Bulletin: IBM Cognos Command Center is affected by multiple vulnerabilities
4 May 202320:23
–ibm
ibm		Security Bulletin: Multiple vulnerabilities in IBM Semeru Runtime affect z/Transaction Processing Facility
24 Feb 202315:32
–ibm
ibm		Security Bulletin: IBM Sterling Connect:Direct Web Services is vulnerable to multiple vulnerabilities due to IBM Java
15 Feb 202306:57
–ibm
ibm		Security Bulletin: Multiple Vulnerabilities in IBM® Java SDK affects Liberty for Java for IBM Cloud due to the October 2022 CPU plus CVE-2022-3676
10 Jan 202318:48
–ibm
ibm		Security Bulletin: Multiple vulnerabilities in IBM Java SDK and IBM Java Runtime affect Rational Service Tester
16 Jun 202319:00
–ibm
Rows per page
OSOS VersionArchitecturePackagePackage VersionFilename
Red Hat Enterprise Linux9.0aarch64java-11-openjdk1:11.0.17.0.8-2.el9_0java-11-openjdk-1:11.0.17.0.8-2.el9_0.aarch64.rpm
Red Hat Enterprise Linux9.0ppc64lejava-11-openjdk1:11.0.17.0.8-2.el9_0java-11-openjdk-1:11.0.17.0.8-2.el9_0.ppc64le.rpm
Red Hat Enterprise Linux9.0s390xjava-11-openjdk1:11.0.17.0.8-2.el9_0java-11-openjdk-1:11.0.17.0.8-2.el9_0.s390x.rpm
Red Hat Enterprise Linux9.0x86_64java-11-openjdk1:11.0.17.0.8-2.el9_0java-11-openjdk-1:11.0.17.0.8-2.el9_0.x86_64.rpm
Red Hat Enterprise Linux9.0aarch64java-11-openjdk-debuginfo1:11.0.17.0.8-2.el9_0java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el9_0.aarch64.rpm
Red Hat Enterprise Linux9.0ppc64lejava-11-openjdk-debuginfo1:11.0.17.0.8-2.el9_0java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el9_0.ppc64le.rpm
Red Hat Enterprise Linux9.0s390xjava-11-openjdk-debuginfo1:11.0.17.0.8-2.el9_0java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el9_0.s390x.rpm
Red Hat Enterprise Linux9.0x86_64java-11-openjdk-debuginfo1:11.0.17.0.8-2.el9_0java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el9_0.x86_64.rpm
Red Hat Enterprise Linux9.0aarch64java-11-openjdk-debugsource1:11.0.17.0.8-2.el9_0java-11-openjdk-debugsource-1:11.0.17.0.8-2.el9_0.aarch64.rpm
Red Hat Enterprise Linux9.0ppc64lejava-11-openjdk-debugsource1:11.0.17.0.8-2.el9_0java-11-openjdk-debugsource-1:11.0.17.0.8-2.el9_0.ppc64le.rpm
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
29 Jun 2026 22:52Current
7.2High risk
Vulners AI Score7.2
CVSS 3.13.7
EPSS0.01401
SSVC
CWE-330
Java Naming InterfaceDNS port randomizationUnauthenticated accessOracle Java SEGraalVM Enterprise Edition
3